Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Nov. 16, 2024, 2 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
193751 7.5 危険 filerun - FileRun の index.php における SQL インジェクションの脆弱性 - CVE-2007-2469 2012-06-26 15:46 2007-05-2 Show GitHub Exploit DB Packet Storm
193752 7.5 危険 firefly - FireFly の modules/admin/include/config.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-2460 2012-06-26 15:46 2007-05-2 Show GitHub Exploit DB Packet Storm
193753 7.5 危険 firefly - FireFly における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-2456 2012-06-26 15:46 2007-05-2 Show GitHub Exploit DB Packet Storm
193754 6 警告 GNU Project - GNU findutils の locate におけるヒープベースのバッファオーバーフローの脆弱性 - CVE-2007-2452 2012-06-26 15:46 2007-06-4 Show GitHub Exploit DB Packet Storm
193755 5 警告 Caucho Technology - Caucho Resin Professional および Caucho Resin におけるシステムパスを取得される脆弱性 - CVE-2007-2441 2012-06-26 15:46 2007-05-16 Show GitHub Exploit DB Packet Storm
193756 5 警告 Caucho Technology - Caucho Resin Professional および Caucho Resin におけるディレクトリトラバーサルの脆弱性 - CVE-2007-2440 2012-06-26 15:46 2007-05-16 Show GitHub Exploit DB Packet Storm
193757 9.4 危険 Caucho Technology - Caucho Resin Professional および Caucho Resin における COM または LPT デバイスからデータを読み取られる脆弱性 - CVE-2007-2439 2012-06-26 15:46 2007-05-16 Show GitHub Exploit DB Packet Storm
193758 10 危険 aventail - Aventail Connect の asnsp.dll におけるバッファオーバーフローの脆弱性 - CVE-2007-2434 2012-06-26 15:46 2007-05-2 Show GitHub Exploit DB Packet Storm
193759 6.8 警告 ariadne - Ariadne の index.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-2433 2012-06-26 15:46 2007-05-2 Show GitHub Exploit DB Packet Storm
193760 7.5 危険 ahhp-portal - Ahhp-Portal の page.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2007-2428 2012-06-26 15:46 2007-05-1 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Nov. 16, 2024, 1:09 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
431 - - - In multiple locations, there is a possible arbitrary code execution due to a logic error in the code. This could lead to local escalation of privilege in the kernel with no additional execution privi… New - CVE-2024-34729 2024-11-15 23:00 2024-11-14 Show GitHub Exploit DB Packet Storm
432 - - - In multiple locations, there is a possible permissions bypass due to a missing null check. This could lead to local escalation of privilege with no additional execution privileges needed. User intera… New - CVE-2024-34719 2024-11-15 23:00 2024-11-14 Show GitHub Exploit DB Packet Storm
433 - - - In PVRSRVRGXKickTA3DKM of rgxta3d.c, there is a possible arbitrary code execution due to improper input validation. This could lead to local escalation of privilege in the kernel with no additional e… New - CVE-2024-31337 2024-11-15 23:00 2024-11-14 Show GitHub Exploit DB Packet Storm
434 - - - In PMRWritePMPageList of pmr.c, there is a possible out of bounds write due to a logic error in the code. This could lead to local escalation of privilege in the kernel with no additional execution p… New - CVE-2024-23715 2024-11-15 23:00 2024-11-14 Show GitHub Exploit DB Packet Storm
435 - - - In PVRSRVRGXKickTA3DKM of rgxta3d.c, there is a possible arbitrary code execution due to improper input validation. This could lead to local escalation of privilege in the kernel with no additional e… New - CVE-2023-35686 2024-11-15 23:00 2024-11-14 Show GitHub Exploit DB Packet Storm
436 - - - In DevmemIntChangeSparse of devicemem_server.c, there is a possible arbitrary code execution due to a logic error in the code. This could lead to local escalation of privilege in the kernel with no a… New - CVE-2023-35659 2024-11-15 23:00 2024-11-14 Show GitHub Exploit DB Packet Storm
437 - - - A vulnerability in Grafana Labs Grafana OSS and Enterprise allows Privilege Escalation allows users to gain access to resources from other organizations within the same Grafana instance via the Grafa… New - CVE-2024-9476 2024-11-15 23:00 2024-11-14 Show GitHub Exploit DB Packet Storm
438 - - - The transport_message_handler function in SCP-Firmware release versions 2.11.0-2.15.0 does not properly handle errors, potentially allowing an Application Processor (AP) to cause a buffer overflow in… New - CVE-2024-9413 2024-11-15 23:00 2024-11-14 Show GitHub Exploit DB Packet Storm
439 - - - Craft is a content management system (CMS). The dataUrl function can be exploited if an attacker has write permissions on system notification templates. This function accepts an absolute file path, r… New CWE-22
CWE-552
Path Traversal
 Files or Directories Accessible to External Parties 		CVE-2024-52292 2024-11-15 23:00 2024-11-14 Show GitHub Exploit DB Packet Storm
440 - - - Craft is a content management system (CMS). A vulnerability in CraftCMS allows an attacker to bypass local file system validation by utilizing a double file:// scheme (e.g., file://file:////). This e… New CWE-22
Path Traversal 		CVE-2024-52291 2024-11-15 23:00 2024-11-14 Show GitHub Exploit DB Packet Storm